Zeek
How Zeek can provide insights despite encrypted communications
This post will outline some methods Zeek employs to provide visibility into SSH connections.
Featured
What the Black Hat NOC taught me about MCP & agentic SOCs (Chapter 2 of 4)
Discover what defending the Black Hat NOC taught me about using Model Context Protocol (MCP) to build an agentic SOC and accelerate threat hunting.